Detailing Critical Microsoft CVE-2024-49112 Vulnerability

Microsoft has recently disclosed a critical Remote Code Execution (RCE) vulnerability in its Lightweight Directory Access Protocol (LDAP) service, identified as CVE-2024-49112 Released as part of the December Patch Tuesday updates, this vulnerability presents a severe risk to enterprise networks by allowing unauthenticated attackers to execute arbitrary code within the context of the LDAP service. […]

Kubernetes Cluster RCE Vulnerability Let Attacker Takeover All Windows Nodes

itsecuritynews.info - 26/Jan 04:06

A critical vulnerability in Kubernetes, designated as CVE-2024-9042, has been discovered, enabling attackers to execute remote code with SYSTEM...

CVE-2025-23006 impacts SonicWall SMA 1000 Series

thecyberthrone.in - 24/Jan 01:34

CVE-2025-23006 is a critical pre-authentication deserialization of untrusted data vulnerability identified in SonicWall’s Secure Mobile Access...

Meta’s Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

itsecuritynews.info - 26/Jan 11:33

A high-severity security flaw has been disclosed in Meta’s Llama large language model (LLM) framework that, if successfully exploited, could allow...

CVE-2024-53691: PoC Exploit Code Release for QNAP Flaw

thecyberthrone.in - 20/Jan 01:12

CVE-2024-53691 is a severe remote code execution (RCE) vulnerability discovered in QNAP NAS devices. Recently, security researcher c411e released a...

Threat actors exploit Aviatrix Controller flaw to deploy backdoors and cryptocurrency miners

securityaffairs.co - 14/Jan 10:23

A critical vulnerability in Aviatrix Controller is actively exploited to deploy backdoors and cryptocurrency miners in the wild. A security researcher...

CVE-2024-50603 impacts Aviatrix with Cryptomining

thecyberthrone.in - 16/Jan 04:04

CVE-2024-50603 is a critical security vulnerability identified in the Aviatrix Controller, a cloud networking platform used to manage and secure cloud...

CVE-2025-0411 impacts 7-Zip with Code Execution

thecyberthrone.in - 21/Jan 13:27

Background of CVE-2025-0411 CVE-2025-0411 is a security flaw identified in 7-Zip, a widely-used open-source file archiver. This vulnerability allows...

CVE-2025-0107 PoC Exploit Code Released for PaloAlto Flaw

thecyberthrone.in - 19/Jan 00:56

Background: CVE-2025-0107 is a critical OS command injection vulnerability discovered in Palo Alto Networks’ Expedition Tool, version 1.2.101...

TheCyberThrone Security BiWeekly Review – January 25, 2025

thecyberthrone.in - 26/Jan 03:18

Welcome to TheCyberThrone. Cybersecurity week in review will be posted covering the important security happenings. This review is for the bi-weekly...

Vulnerability Summary for the Week of January 20, 2025

itsecuritynews.info - 18:36

High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info aEnrich Technology–a+HRD The a+HRD from aEnrich...

Rubriques :